@mastra/github-signals 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,31 @@
+# @mastra/github-signals
+
+## 0.1.1
+
+### Patch Changes
+
+- Gate GitHub signal notifications behind author permission checks to guard against prompt injection from random commenters. Only comments from users with write access (admin, maintain, write) trigger notifications. Bot comments are opt-in via an allowlist that defaults to CodeRabbit and Devin, with `ignoredBots` still available as an explicit blocklist. Unauthorized latest comments are excluded before notification classification so noisy bot edits do not render in notification metadata or mask the latest authorized comment. Scheduled polls now include comments and detect latest-comment timestamp changes so comment notifications are not lost behind stale or unchanged thread hashes. Comment activity notifications render the latest authorized comment author and excerpt as high-priority GitHub signal updates. ([#17590](https://github.com/mastra-ai/mastra/pull/17590))
+
+  New options on `GithubSignalsOptions`:
+  - `authorizedPermissions` — permission levels that authorize human commenters (default: `['admin', 'maintain', 'write']`)
+  - `authorizedBots` — bot logins authorized to trigger notifications (default: `['coderabbitai[bot]', 'devin-ai-integration[bot]']`)
+  - `ignoredBots` — bot logins whose comments should NOT trigger notifications, even if authorized
+  - `permissionResolver` — injectable resolver for looking up collaborator permissions (default: `gh api`)
+
+- Updated dependencies [[`d468acb`](https://github.com/mastra-ai/mastra/commit/d468acb07aec1bb19a2cb0ada8042b05b46746b2), [`575f815`](https://github.com/mastra-ai/mastra/commit/575f815c5c3567b71c0b83cbb7fa98c8253a9d9c), [`34839c1`](https://github.com/mastra-ai/mastra/commit/34839c1910b6964bf59ed0cee58844efebbb684e), [`053735a`](https://github.com/mastra-ai/mastra/commit/053735a75c2c18e23ce34d9468007efa4a45f4c4), [`306909a`](https://github.com/mastra-ai/mastra/commit/306909a693de77d709b38706e2673c9547d24a28), [`5191af8`](https://github.com/mastra-ai/mastra/commit/5191af80c799eea25357c545fc05d91b3883531d), [`43bd3d4`](https://github.com/mastra-ai/mastra/commit/43bd3d421987463fdf35386a45199c49499ed069), [`e6fa79e`](https://github.com/mastra-ai/mastra/commit/e6fa79ec72a2ddffdd25e85270398951e9d552a4), [`904bcdf`](https://github.com/mastra-ai/mastra/commit/904bcdf7b8004aa7be823f9f70ca63580e47e470), [`7f5ee1d`](https://github.com/mastra-ai/mastra/commit/7f5ee1dca46daee8d2817f2ebe49e6335da81956), [`1e9aab5`](https://github.com/mastra-ai/mastra/commit/1e9aab50ff11e6e88fde4d7cbf512c44a9fe8d61), [`2bccba4`](https://github.com/mastra-ai/mastra/commit/2bccba4c03cadc815c2d54cbf4dd43a922140a8d), [`bf8eb6d`](https://github.com/mastra-ai/mastra/commit/bf8eb6d0ec213a403eb9265a594ad283c44ab3dc), [`e9be4e7`](https://github.com/mastra-ai/mastra/commit/e9be4e747ec3d8b65548bff92f9377db06105376), [`493a328`](https://github.com/mastra-ai/mastra/commit/493a328f4346a1deeb9f1e2e44c8f2a3a4d7591b), [`d53cfc2`](https://github.com/mastra-ai/mastra/commit/d53cfc2c7f8d78343a4aa84ec4e129ba25f3325e), [`65799d4`](https://github.com/mastra-ai/mastra/commit/65799d4d549e5ebb9c848fbe3f51ac090f64becf), [`c268c89`](https://github.com/mastra-ai/mastra/commit/c268c89f4c63a93ee474d3cffdf3ea60bf00d4f2), [`34839c1`](https://github.com/mastra-ai/mastra/commit/34839c1910b6964bf59ed0cee58844efebbb684e), [`014e00f`](https://github.com/mastra-ai/mastra/commit/014e00f2b3a597a016b72f9901c6ab27d491f822), [`029a414`](https://github.com/mastra-ai/mastra/commit/029a4141719793bd3e898a39eb5a0466a55f5f3a), [`d468acb`](https://github.com/mastra-ai/mastra/commit/d468acb07aec1bb19a2cb0ada8042b05b46746b2), [`b147b29`](https://github.com/mastra-ai/mastra/commit/b147b2907f0cd1aa812efe6d6e3f58d22e66fc88), [`d371ac1`](https://github.com/mastra-ai/mastra/commit/d371ac1d9820afaaf7cfdbc380a475946a994d8f), [`2bccba4`](https://github.com/mastra-ai/mastra/commit/2bccba4c03cadc815c2d54cbf4dd43a922140a8d), [`0c72f03`](https://github.com/mastra-ai/mastra/commit/0c72f032abb13254df5a7856d64be2f207b8006d), [`cf182b7`](https://github.com/mastra-ai/mastra/commit/cf182b7fb495767946d9840ef29f19cfa906f31f), [`3b45ea9`](https://github.com/mastra-ai/mastra/commit/3b45ea95015557a6cb9d70dc5252af54ab1b78ac), [`a049c2a`](https://github.com/mastra-ai/mastra/commit/a049c2a9dfb41d0ee2e7a28874a88cd64fd5669f), [`f084be1`](https://github.com/mastra-ai/mastra/commit/f084be1fcbe33ad7480913e44d6130c421c0976f), [`b147b29`](https://github.com/mastra-ai/mastra/commit/b147b2907f0cd1aa812efe6d6e3f58d22e66fc88), [`2a96528`](https://github.com/mastra-ai/mastra/commit/2a9652848dfa3c5a2426f952e9d93554c26fd90f), [`f2ab060`](https://github.com/mastra-ai/mastra/commit/f2ab060162bea81505fda553e2cee29c1979fd04), [`5d302c8`](https://github.com/mastra-ai/mastra/commit/5d302c8eda1a6ac74eab5e442c4f64db6cc97a06), [`34839c1`](https://github.com/mastra-ai/mastra/commit/34839c1910b6964bf59ed0cee58844efebbb684e), [`a952852`](https://github.com/mastra-ai/mastra/commit/a952852c971a21fb646cd907c75fcf4443cdc963), [`2656d9c`](https://github.com/mastra-ai/mastra/commit/2656d9c2976d4f3354253bfbbbf9b88a1b2bbf34), [`63e3fe1`](https://github.com/mastra-ai/mastra/commit/63e3fe13cc1ea96f91d7c68aea92f400faf9e4da), [`1d4ce8d`](https://github.com/mastra-ai/mastra/commit/1d4ce8daaa54511f325c1b609d31b8e54009d677), [`8c68372`](https://github.com/mastra-ai/mastra/commit/8c68372e85fe0b066ec12c58bd29ffb93e54c552)]:
+  - @mastra/core@1.42.0
+
+## 0.1.1-alpha.0
+
+### Patch Changes
+
+- Gate GitHub signal notifications behind author permission checks to guard against prompt injection from random commenters. Only comments from users with write access (admin, maintain, write) trigger notifications. Bot comments are opt-in via an allowlist that defaults to CodeRabbit and Devin, with `ignoredBots` still available as an explicit blocklist. Unauthorized latest comments are excluded before notification classification so noisy bot edits do not render in notification metadata or mask the latest authorized comment. Scheduled polls now include comments and detect latest-comment timestamp changes so comment notifications are not lost behind stale or unchanged thread hashes. Comment activity notifications render the latest authorized comment author and excerpt as high-priority GitHub signal updates. ([#17590](https://github.com/mastra-ai/mastra/pull/17590))
+
+  New options on `GithubSignalsOptions`:
+  - `authorizedPermissions` — permission levels that authorize human commenters (default: `['admin', 'maintain', 'write']`)
+  - `authorizedBots` — bot logins authorized to trigger notifications (default: `['coderabbitai[bot]', 'devin-ai-integration[bot]']`)
+  - `ignoredBots` — bot logins whose comments should NOT trigger notifications, even if authorized
+  - `permissionResolver` — injectable resolver for looking up collaborator permissions (default: `gh api`)
+
+- Updated dependencies [[`2bccba4`](https://github.com/mastra-ai/mastra/commit/2bccba4c03cadc815c2d54cbf4dd43a922140a8d), [`2bccba4`](https://github.com/mastra-ai/mastra/commit/2bccba4c03cadc815c2d54cbf4dd43a922140a8d), [`f2ab060`](https://github.com/mastra-ai/mastra/commit/f2ab060162bea81505fda553e2cee29c1979fd04), [`5d302c8`](https://github.com/mastra-ai/mastra/commit/5d302c8eda1a6ac74eab5e442c4f64db6cc97a06)]:
+  - @mastra/core@1.42.0-alpha.1

package/dist/index.cjs

@@ -26,6 +26,10 @@ var GITHUB_SUBSCRIBE_PR_TAG = "github-subscribe-pr";
 var GITHUB_UNSUBSCRIBE_PR_TAG = "github-unsubscribe-pr";
 var GITHUB_SYNC_STATUS_TAG = "github-sync-status";
 var GITHUB_SIGNALS_METADATA_KEY = "githubSignals";
+var DEFAULT_AUTHORIZED_PERMISSIONS = ["admin", "maintain", "write"];
+var DEFAULT_AUTHORIZED_BOTS = ["coderabbitai[bot]", "devin-ai-integration[bot]"];
+var PERMISSION_CACHE_TTL_MS = 5 * 60 * 1e3;
+var AUTHOR_GATED_NOTIFICATION_KINDS = /* @__PURE__ */ new Set(["pull-request-activity", "pull-request-review-activity"]);
 var createGithubTool = tools.createTool;
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -146,6 +150,36 @@ function getPrLabel(subscription, snapshot) {
 function getMergedNotificationSummary(label) {
   return `${label} was merged. This thread has been automatically unsubscribed from this PR. Resubscribe if you still need updates.`;
 }
+function getCommentExcerpt(body) {
+  const excerpt = body.replace(/\s+/g, " ").trim();
+  return excerpt.length > 240 ? `${excerpt.slice(0, 237)}...` : excerpt;
+}
+function getCommentNotificationSummary(pr, snapshot) {
+  if (!snapshot.latestCommentAuthor || !snapshot.latestCommentBody) return void 0;
+  return `${snapshot.latestCommentAuthor} commented on ${pr}: ${getCommentExcerpt(snapshot.latestCommentBody)}`;
+}
+var githubActivityNotificationPriority = {
+  high: 0,
+  medium: 1
+};
+function getGithubActivityNotificationRank(notification) {
+  return notification.kind === "pull-request-activity" ? 0 : 1;
+}
+function compareGithubActivityNotifications(a, b) {
+  if (!a && !b) return 0;
+  if (!a) return 1;
+  if (!b) return -1;
+  const priorityComparison = githubActivityNotificationPriority[a.priority] - githubActivityNotificationPriority[b.priority];
+  if (priorityComparison !== 0) return priorityComparison;
+  return getGithubActivityNotificationRank(a) - getGithubActivityNotificationRank(b);
+}
+function classifyGithubCommentActivityNotification(input) {
+  if (isBotOnlyActivity(input.snapshot)) return void 0;
+  const pr = `${input.subscription.owner}/${input.subscription.repo}#${input.subscription.number}`;
+  const summary = getCommentNotificationSummary(pr, input.snapshot);
+  if (!summary) return void 0;
+  return { kind: "pull-request-activity", priority: "high", summary };
+}
 function getCheckUpdatedTime(check) {
   const value = check.updatedAt ? Date.parse(check.updatedAt) : Number.NaN;
   return Number.isFinite(value) ? value : 0;
@@ -269,10 +303,11 @@ function classifyGithubActivityNotification(input) {
   }
   if (input.snapshot.ciState === "pending" && input.subscription.lastObservedCiState === "pending") return void 0;
   if (isBotOnlyActivity(input.snapshot)) return void 0;
+  const commentSummary = getCommentNotificationSummary(pr, input.snapshot);
   return {
     kind: "pull-request-activity",
-    priority: "medium",
-    summary: `${pr} has new activity${input.snapshot.title ? `: ${input.snapshot.title}` : ""}`
+    priority: commentSummary ? "high" : "medium",
+    summary: commentSummary ?? `${pr} has new activity${input.snapshot.title ? `: ${input.snapshot.title}` : ""}`
   };
 }
 function classifyGithubBaselineNotification(input) {
@@ -397,13 +432,15 @@ var GitcrawlSyncClient = class {
             join threads t on t.id=rt.thread_id
             join repositories r on r.id=t.repo_id
            where r.owner=${owner} and r.name=${repo} and t.number=${number} and rt.is_resolved=0`);
-      const [latestComment] = await queryGitcrawlDb(`select c.author_login, c.author_type, c.is_bot
+      const latestComments = await queryGitcrawlDb(`select c.author_login, c.author_type, c.is_bot, c.body, json_extract(c.raw_json, '$.html_url') as html_url,
+                 coalesce(c.updated_at_gh, c.created_at_gh) as updated_at
             from comments c
             join threads t on t.id=c.thread_id
             join repositories r on r.id=t.repo_id
            where r.owner=${owner} and r.name=${repo} and t.number=${number}
            order by coalesce(c.updated_at_gh, c.created_at_gh) desc
-           limit 1`);
+           limit 20`);
+      const latestComment = latestComments[0];
       const checks = normalizeGithubChecksForSnapshot({
         checkRows: checkRows.map((row) => ({
           source: "check",
@@ -465,7 +502,18 @@ var GitcrawlSyncClient = class {
         latestReviewThreadAt: readString(reviewState?.latest_review_thread_at),
         latestCommentAuthor: readString(latestComment?.author_login),
         latestCommentAuthorType: readString(latestComment?.author_type),
-        latestCommentIsBot: latestComment?.is_bot === 1
+        latestCommentIsBot: latestComment?.is_bot === 1,
+        latestCommentBody: readString(latestComment?.body),
+        latestCommentUrl: readString(latestComment?.html_url),
+        latestCommentUpdatedAt: readString(latestComment?.updated_at),
+        latestComments: latestComments.map((comment) => ({
+          author: readString(comment.author_login),
+          authorType: readString(comment.author_type),
+          isBot: comment.is_bot === 1,
+          body: readString(comment.body),
+          url: readString(comment.html_url),
+          updatedAt: readString(comment.updated_at)
+        }))
       };
     } catch {
       return void 0;
@@ -520,9 +568,11 @@ var GithubSignals = class extends signals.SignalProvider {
   #syncClient;
   #repositoryResolver;
   #polling = /* @__PURE__ */ new Map();
+  #permissionCache = /* @__PURE__ */ new Map();
   #agent;
   #agentOptions = {};
   #subscriptionsChangedHandler;
+  #pollingChangedHandler;
   constructor(options = {}) {
     super();
     this.#options = options;
@@ -557,6 +607,9 @@ var GithubSignals = class extends signals.SignalProvider {
   onSubscriptionsChanged(handler) {
     this.#subscriptionsChangedHandler = handler;
   }
+  onPollingChanged(handler) {
+    this.#pollingChangedHandler = handler;
+  }
   __registerMastra(mastra) {
     super.__registerMastra(mastra);
     this.#ghMastra = mastra;
@@ -595,15 +648,13 @@ var GithubSignals = class extends signals.SignalProvider {
       this.#polling.delete(pollingKey);
     }
     if (this.#polling.has(key)) return true;
-    let scheduledPollCount = options.pollImmediately ? 1 : 0;
     const runPoll = (pollOptions = {}) => {
       void this.#pollThread(input, pollOptions).catch((error) => {
         console.warn("GitHub PR polling failed:", error);
       });
     };
     const timer = setInterval(() => {
-      scheduledPollCount += 1;
-      runPoll({ includeComments: scheduledPollCount % 2 === 1 });
+      runPoll({ includeComments: true });
     }, this.#options.pollIntervalMs ?? 3e5);
     if (options.pollImmediately) runPoll({ includeComments: true });
     timer.unref?.();
@@ -620,6 +671,9 @@ var GithubSignals = class extends signals.SignalProvider {
   isPollingThread(input) {
     return this.#polling.has(this.#pollingKey(input));
   }
+  isPollingThreadRunning(input) {
+    return this.#polling.get(this.#pollingKey(input))?.running ?? false;
+  }
   getPollIntervalMs() {
     return this.#options.pollIntervalMs ?? 3e5;
   }
@@ -711,6 +765,10 @@ var GithubSignals = class extends signals.SignalProvider {
   }
   #createTools(args) {
     const threadContext = this.#getThreadContext(args);
+    const getExecutionThreadContext = (context) => ({
+      threadId: context?.agent?.threadId ?? threadContext.threadId,
+      resourceId: context?.agent?.resourceId ?? threadContext.resourceId
+    });
     return {
       ...args.tools,
       github_subscribe_pr: createGithubTool({
@@ -721,14 +779,15 @@ var GithubSignals = class extends signals.SignalProvider {
           owner: z__default.default.string().optional(),
           repo: z__default.default.string().optional()
         }),
-        execute: async (input) => {
+        execute: async (input, context) => {
+          const executionThreadContext = getExecutionThreadContext(context);
           const result = await this.#subscribe({
             id: `github-tool-subscribe-${crypto.randomUUID()}`,
             owner: input.owner,
             repo: input.repo,
             number: input.number,
-            threadId: threadContext.threadId,
-            resourceId: threadContext.resourceId
+            threadId: executionThreadContext.threadId,
+            resourceId: executionThreadContext.resourceId
           });
           return {
             subscribed: true,
@@ -748,14 +807,15 @@ var GithubSignals = class extends signals.SignalProvider {
           owner: z__default.default.string().optional(),
           repo: z__default.default.string().optional()
         }),
-        execute: async (input) => {
+        execute: async (input, context) => {
+          const executionThreadContext = getExecutionThreadContext(context);
           const result = await this.#unsubscribe({
             id: `github-tool-unsubscribe-${crypto.randomUUID()}`,
             owner: input.owner,
             repo: input.repo,
             number: input.number,
-            threadId: threadContext.threadId,
-            resourceId: threadContext.resourceId
+            threadId: executionThreadContext.threadId,
+            resourceId: executionThreadContext.resourceId
           });
           return {
             unsubscribed: result.removed ?? false,
@@ -805,6 +865,9 @@ var GithubSignals = class extends signals.SignalProvider {
   #notifySubscriptionsChanged(input) {
     this.#subscriptionsChangedHandler?.(input);
   }
+  #notifyPollingChanged(input) {
+    this.#pollingChangedHandler?.(input);
+  }
   async #pollThread(input, options = {}) {
     const key = this.#pollingKey(input);
     const state = this.#polling.get(key);
@@ -812,6 +875,7 @@ var GithubSignals = class extends signals.SignalProvider {
       return 0;
     }
     if (state) state.running = true;
+    this.#notifyPollingChanged({ threadId: input.threadId, resourceId: input.resourceId, running: true });
     try {
       const { threadStore, loadedThread } = await this.#loadThread(input);
       const githubMetadata = getGithubMetadata(loadedThread.metadata);
@@ -830,7 +894,9 @@ var GithubSignals = class extends signals.SignalProvider {
           includeComments: options.includeComments
         };
         const syncResult = await this.#syncClient.syncPullRequest(syncInput);
-        const snapshot = syncResult.ok ? await this.#syncClient.getPullRequestSnapshot?.(syncInput) : void 0;
+        let snapshot = syncResult.ok ? await this.#syncClient.getPullRequestSnapshot?.(syncInput) : void 0;
+        if (snapshot)
+          snapshot = await this.#filterUnauthorizedLatestComment(subscription.owner, subscription.repo, snapshot);
         const nextSubscription = {
           ...subscription,
           updatedAt: now,
@@ -843,25 +909,28 @@ var GithubSignals = class extends signals.SignalProvider {
         const previousContentHash = subscription.lastObservedContentHash;
         const previousThreadContentHash = subscription.lastObservedThreadContentHash;
         const previousHeadSha = subscription.lastObservedHeadSha;
+        const latestCommentChanged = !!previousGithubUpdatedAt && !!snapshot?.latestCommentUpdatedAt && Date.parse(snapshot.latestCommentUpdatedAt) > Date.parse(previousGithubUpdatedAt);
         if (snapshot) applySnapshotCursor(nextSubscription, snapshot);
         const isFirstObservation = syncResult.ok && snapshot && !previousGithubUpdatedAt && !previousContentHash;
         const legacyAggregateChanged = previousContentHash && snapshot?.contentHash && previousContentHash !== snapshot.contentHash && !previousThreadContentHash && !previousHeadSha;
-        const changed = isFirstObservation || syncResult.ok && snapshot && (legacyAggregateChanged || previousThreadContentHash && snapshot.threadContentHash && previousThreadContentHash !== snapshot.threadContentHash || previousHeadSha && snapshot.headSha && previousHeadSha !== snapshot.headSha || subscription.lastObservedState && snapshot.state && subscription.lastObservedState !== snapshot.state || subscription.lastObservedMergeableState && snapshot.mergeableState && subscription.lastObservedMergeableState !== snapshot.mergeableState || subscription.lastObservedCiState && snapshot.ciState && subscription.lastObservedCiState !== snapshot.ciState || subscription.lastObservedReviewStateHash && snapshot.reviewStateHash && subscription.lastObservedReviewStateHash !== snapshot.reviewStateHash);
+        const changed = isFirstObservation || syncResult.ok && snapshot && (legacyAggregateChanged || latestCommentChanged || previousThreadContentHash && snapshot.threadContentHash && previousThreadContentHash !== snapshot.threadContentHash || previousHeadSha && snapshot.headSha && previousHeadSha !== snapshot.headSha || subscription.lastObservedState && snapshot.state && subscription.lastObservedState !== snapshot.state || subscription.lastObservedMergeableState && snapshot.mergeableState && subscription.lastObservedMergeableState !== snapshot.mergeableState || subscription.lastObservedCiState && snapshot.ciState && subscription.lastObservedCiState !== snapshot.ciState || subscription.lastObservedReviewStateHash && snapshot.reviewStateHash && subscription.lastObservedReviewStateHash !== snapshot.reviewStateHash);
         let shouldKeepSubscription = true;
-        if (changed) {
-          const notification = await this.#sendActivityNotification({
+        if (changed && snapshot) {
+          const notifications = await this.#sendActivityNotifications({
             polling: input,
             subscription,
             snapshot,
             previousGithubUpdatedAt,
-            previousContentHash
+            previousContentHash,
+            latestCommentChanged
           });
-          if (notification) {
+          const primaryNotification = notifications[0];
+          if (primaryNotification) {
             nextSubscription.lastNotificationAt = now;
-            nextSubscription.lastNotificationKind = notification.kind;
-            nextSubscription.lastNotificationPriority = notification.priority;
-            nextSubscription.lastNotificationSummary = notification.summary;
-            shouldKeepSubscription = notification.kind !== "pull-request-merged";
+            nextSubscription.lastNotificationKind = primaryNotification.kind;
+            nextSubscription.lastNotificationPriority = primaryNotification.priority;
+            nextSubscription.lastNotificationSummary = primaryNotification.summary;
+            shouldKeepSubscription = notifications.every((notification) => notification.kind !== "pull-request-merged");
           }
         }
         if (shouldKeepSubscription) subscriptions.push(nextSubscription);
@@ -884,17 +953,20 @@ var GithubSignals = class extends signals.SignalProvider {
     } finally {
       const latestState = this.#polling.get(key);
       if (latestState) latestState.running = false;
+      this.#notifyPollingChanged({ threadId: input.threadId, resourceId: input.resourceId, running: false });
     }
   }
-  async #sendGithubNotification(input) {
+  #createGithubNotificationInput(input) {
     const failingChecks = getFailingChecks(input.snapshot);
     const pendingChecks = getPendingChecks(input.snapshot);
+    const latestCommentExcerpt = input.snapshot.latestCommentBody ? getCommentExcerpt(input.snapshot.latestCommentBody) : void 0;
+    const latestCommentDedupeSuffix = input.notification.kind === "pull-request-activity" && input.snapshot.latestCommentUrl ? `comment:${input.snapshot.latestCommentUrl}:${input.snapshot.latestCommentUpdatedAt ?? ""}` : input.dedupeSuffix;
     const notificationInput = {
       source: "github",
       kind: input.notification.kind,
       priority: input.notification.priority,
       summary: input.notification.summary,
-      dedupeKey: `github:${input.subscription.owner}/${input.subscription.repo}#${input.subscription.number}:${input.dedupeSuffix}`,
+      dedupeKey: `github:${input.subscription.owner}/${input.subscription.repo}#${input.subscription.number}:${latestCommentDedupeSuffix}`,
       coalesceKey: `github:${input.subscription.owner}/${input.subscription.repo}#${input.subscription.number}:${input.notification.kind}`,
       attributes: {
         owner: input.subscription.owner,
@@ -908,6 +980,10 @@ var GithubSignals = class extends signals.SignalProvider {
         ...input.snapshot.mergeableState ? { mergeableState: input.snapshot.mergeableState } : {},
         ...input.snapshot.ciState ? { ciState: input.snapshot.ciState } : {},
         ...input.snapshot.unresolvedReviewThreads !== void 0 ? { unresolvedReviewThreads: input.snapshot.unresolvedReviewThreads } : {},
+        ...input.snapshot.latestCommentAuthor ? { latestCommentAuthor: input.snapshot.latestCommentAuthor } : {},
+        ...latestCommentExcerpt ? { latestCommentExcerpt } : {},
+        ...input.snapshot.latestCommentUrl ? { latestCommentUrl: input.snapshot.latestCommentUrl } : {},
+        ...input.snapshot.latestCommentUpdatedAt ? { latestCommentUpdatedAt: input.snapshot.latestCommentUpdatedAt } : {},
         ...failingChecks.length > 0 ? { failingChecks: failingChecks.map((check) => check.name).join(", ") } : {},
         ...pendingChecks.length > 0 ? { pendingChecks: pendingChecks.map((check) => check.name).join(", ") } : {}
       },
@@ -936,11 +1012,19 @@ var GithubSignals = class extends signals.SignalProvider {
           latestCommentAuthor: input.snapshot.latestCommentAuthor,
           latestCommentAuthorType: input.snapshot.latestCommentAuthorType,
           latestCommentIsBot: input.snapshot.latestCommentIsBot,
+          latestCommentBody: input.snapshot.latestCommentBody,
+          latestCommentExcerpt,
+          latestCommentUrl: input.snapshot.latestCommentUrl,
+          latestCommentUpdatedAt: input.snapshot.latestCommentUpdatedAt,
           failingChecks,
           pendingChecks
         }
       }
     };
+    return notificationInput;
+  }
+  async #sendGithubNotification(input) {
+    const notificationInput = this.#createGithubNotificationInput(input);
     const streamOptions = await this.#agentOptions.getNotificationStreamOptions?.(input.target);
     await input.agent?.sendNotificationSignal?.(
       notificationInput,
@@ -959,25 +1043,144 @@ var GithubSignals = class extends signals.SignalProvider {
       dedupeSuffix: `baseline:${input.subscription.lastSubscribeSignalId}`
     });
   }
-  async #sendActivityNotification(input) {
+  async #isAuthorizedAuthor(owner, repo, user, metadata = {}) {
+    if (!user) return false;
+    const normalizedUser = user.toLowerCase();
+    const isBot = metadata.isBot === true || metadata.authorType?.toLowerCase() === "bot" || normalizedUser.endsWith("[bot]");
+    if (isBot) {
+      const ignoredBots = this.#options.ignoredBots ?? [];
+      if (ignoredBots.some((bot) => bot.toLowerCase() === normalizedUser)) return false;
+      const authorizedBots = this.#options.authorizedBots ?? DEFAULT_AUTHORIZED_BOTS;
+      return authorizedBots.some((bot) => bot.toLowerCase() === normalizedUser);
+    }
+    const permission = await this.#loadAuthorPermission(owner, repo, user);
+    const authorizedPermissions = this.#options.authorizedPermissions ?? DEFAULT_AUTHORIZED_PERMISSIONS;
+    return !!permission && authorizedPermissions.includes(permission);
+  }
+  async #filterUnauthorizedLatestComment(owner, repo, snapshot) {
+    const comments = snapshot.latestComments?.length ? snapshot.latestComments : [
+      {
+        author: snapshot.latestCommentAuthor,
+        authorType: snapshot.latestCommentAuthorType,
+        isBot: snapshot.latestCommentIsBot,
+        body: snapshot.latestCommentBody,
+        url: snapshot.latestCommentUrl,
+        updatedAt: snapshot.latestCommentUpdatedAt
+      }
+    ];
+    if (!comments.some((comment) => comment.author)) return snapshot;
+    if (!comments.some((comment) => comment.body || comment.url || comment.updatedAt)) return snapshot;
+    for (const comment of comments) {
+      if (!await this.#isAuthorizedAuthor(owner, repo, comment.author, {
+        authorType: comment.authorType,
+        isBot: comment.isBot
+      })) {
+        continue;
+      }
+      return {
+        ...snapshot,
+        latestCommentAuthor: comment.author,
+        latestCommentAuthorType: comment.authorType,
+        latestCommentIsBot: comment.isBot,
+        latestCommentBody: comment.body,
+        latestCommentUrl: comment.url,
+        latestCommentUpdatedAt: comment.updatedAt
+      };
+    }
+    return {
+      ...snapshot,
+      latestCommentAuthor: void 0,
+      latestCommentAuthorType: void 0,
+      latestCommentIsBot: void 0,
+      latestCommentBody: void 0,
+      latestCommentUrl: void 0,
+      latestCommentUpdatedAt: void 0
+    };
+  }
+  async #loadAuthorPermission(owner, repo, user) {
+    const cacheKey = `${owner}/${repo}:${user.toLowerCase()}`;
+    const cached = this.#permissionCache.get(cacheKey);
+    if (cached && cached.expiresAt > Date.now()) return cached.permission;
+    if (cached) this.#permissionCache.delete(cacheKey);
+    try {
+      let permission;
+      if (this.#options.permissionResolver) {
+        permission = await this.#options.permissionResolver.getPermission(owner, repo, user);
+      } else {
+        const { stdout } = await execFileAsync("gh", [
+          "api",
+          `repos/${owner}/${repo}/collaborators/${user}/permission`,
+          "--jq",
+          ".permission"
+        ]);
+        const raw = stdout.trim();
+        permission = ["admin", "maintain", "write", "triage", "read", "none"].includes(
+          raw
+        ) ? raw : void 0;
+      }
+      if (permission) {
+        this.#permissionCache.set(cacheKey, { permission, expiresAt: Date.now() + PERMISSION_CACHE_TTL_MS });
+      }
+      return permission;
+    } catch {
+      this.#permissionCache.delete(cacheKey);
+      return void 0;
+    }
+  }
+  async #sendActivityNotifications(input) {
     const agent = this.#getNotificationAgent(input.polling);
-    if (!agent?.sendNotificationSignal) return void 0;
-    const notification = classifyGithubActivityNotification({
-      subscription: input.subscription,
-      snapshot: input.snapshot
-    });
-    if (!notification) return void 0;
-    await this.#sendGithubNotification({
-      agent,
-      subscription: input.subscription,
-      snapshot: input.snapshot,
-      notification,
-      target: { resourceId: input.polling.resourceId, threadId: input.polling.threadId },
-      dedupeSuffix: input.snapshot.contentHash ?? input.snapshot.githubUpdatedAt ?? String(Date.now()),
-      previousGithubUpdatedAt: input.previousGithubUpdatedAt,
-      previousContentHash: input.previousContentHash
-    });
-    return notification;
+    if (!agent?.sendNotificationSignal) return [];
+    const notifications = [
+      classifyGithubActivityNotification({
+        subscription: input.subscription,
+        snapshot: input.snapshot
+      })
+    ];
+    if (input.latestCommentChanged && notifications[0]?.kind !== "pull-request-activity") {
+      notifications.push(
+        classifyGithubCommentActivityNotification({
+          subscription: input.subscription,
+          snapshot: input.snapshot
+        })
+      );
+    }
+    const sent = [];
+    const notificationInputs = [];
+    for (const notification of notifications.sort(compareGithubActivityNotifications)) {
+      if (!notification) continue;
+      if (AUTHOR_GATED_NOTIFICATION_KINDS.has(notification.kind)) {
+        const authorized = await this.#isAuthorizedAuthor(
+          input.subscription.owner,
+          input.subscription.repo,
+          input.snapshot.latestCommentAuthor,
+          {
+            authorType: input.snapshot.latestCommentAuthorType,
+            isBot: input.snapshot.latestCommentIsBot
+          }
+        );
+        if (!authorized) continue;
+      }
+      notificationInputs.push(
+        this.#createGithubNotificationInput({
+          subscription: input.subscription,
+          snapshot: input.snapshot,
+          notification,
+          dedupeSuffix: input.snapshot.contentHash ?? input.snapshot.githubUpdatedAt ?? String(Date.now()),
+          previousGithubUpdatedAt: input.previousGithubUpdatedAt,
+          previousContentHash: input.previousContentHash
+        })
+      );
+      sent.push(notification);
+    }
+    if (notificationInputs.length > 0) {
+      const target = { resourceId: input.polling.resourceId, threadId: input.polling.threadId };
+      const streamOptions = await this.#agentOptions.getNotificationStreamOptions?.(target);
+      await agent.sendNotificationSignal(
+        notificationInputs,
+        streamOptions ? { ...target, ifIdle: { streamOptions } } : target
+      );
+    }
+    return sent;
   }
   async #subscribe(input) {
     const { owner, repo } = await this.#resolveRepository(input);